Privacy Policy
Effective date: 30 September 2026 · Last updated: 30 September 2026
1. Overview
Elastic Skin Guide ("we", "us", "our") is operated by [LEGAL OPERATOR NAME] from Australia. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, store and protect your personal information when you use our website and mobile application (the "Service").
This Privacy Policy is designed to comply with the Australian Privacy Act 1988 and the Australian Privacy Principles. We recognise that health-related information may attract additional privacy obligations, and we design our practices accordingly. Users in other jurisdictions (including the EU/EEA, UK, US and Canada) should note that additional local privacy requirements may apply.
Health data is sensitive information. Information about your foreskin health, stretching progress and self-assessed phimosis grade is health-related data. We treat this as sensitive and apply enhanced protections: it is never sold, never shared for advertising, and is isolated to your account.
2. Information We Collect
Account Information
When you create an account, we collect:
- Email address
- Full name
- Authentication credentials (managed securely by our platform)
Progress Information
When you use tracking features, we may store:
- Stretching session logs (date, duration, technique, comfort level)
- Self-assessed phimosis grade
- Journal text entries (notes you choose to write)
- Streak and badge data derived from the above
We do not currently support the uploading of photographs. If photo upload features are introduced in the future, they will be subject to separate legal and privacy review and a updated version of this policy.
Payment Information
When you purchase a subscription, payment is processed by our payment provider (Stripe). We do not store your full card details — these are handled securely by Stripe. We receive your Stripe customer ID, subscription ID and billing status for the purpose of managing your subscription.
Technical Information
We automatically collect:
- IP address
- Device type and browser information
- Usage data (pages visited, features used, session duration)
- Cookies and similar technologies
Information We Do Not Collect
- We do not collect genital photographs
- We do not collect detailed medical history or diagnoses
- We do not collect precise location data beyond country-level for analytics
- We do not collect unnecessary sexual information
3. Why We Collect Information
- To provide the Service: account management, progress tracking, subscription management
- To improve the Service: analytics, feature development, performance monitoring
- To communicate with you: account notifications, subscription updates, support requests
- To ensure security: fraud prevention, abuse detection, access control
- To comply with legal obligations: record-keeping as required by law
4. Storage & Security
Your information is stored on secure servers managed by our hosting provider. We use encryption in transit (TLS/SSL) and at rest. Access to personal information is restricted to authorised personnel on a least-privilege basis. User-specific data (such as session logs and journal entries) is isolated per user through row-level security — no user can access another user's data.
No method of transmission or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
5. Retention & Deletion
We retain your information for as long as your account is active and for a reasonable period thereafter for legal, accounting or dispute resolution purposes. You may request deletion of your data or your account at any time through the Settings page or by contacting us at [CONTACT EMAIL]. We will delete your personal information within a reasonable timeframe, subject to any legal retention obligations.
6. Access & Correction
You have the right to access and correct your personal information. You can update your profile through the Settings page. For other requests, contact [CONTACT EMAIL].
7. Third-Party Providers
We use the following categories of third-party providers:
- Hosting & platform: Base44 (application hosting and database)
- Payments: Stripe (subscription billing)
- Analytics: Privacy-conscious analytics to understand usage patterns
- Email: For notification and support communications
- Written Q&A (Premium tier): If you submit a question to our written Q&A feature, the details of your question (which may include self-assessed grade or progress context you choose to share) are sent to our education team to provide a written educational response. Responses are educational and not medical advice. We do not share your data with third-party AI providers.
Some providers may be located overseas, including in the United States. By using the Service, you acknowledge that your information may be processed in countries with different privacy laws.
8. International Users
The Service is operated from Australia and is available to users globally. Laws and requirements relating to health information, consumer protection, online safety, age assurance, privacy and digital services may differ between jurisdictions. Users are responsible for complying with applicable local requirements.
9. Cookies & Analytics
We use essential cookies for site functionality and analytics cookies to understand usage patterns. Analytics cookies only load after you give consent via our cookie banner. You can withdraw consent at any time by clearing your browser storage. We do not share sensitive health information with advertising platforms and never sell your data.
10. Data Breach Procedures
We maintain procedures to respond to suspected data breaches. If a breach occurs that is likely to result in serious harm to individuals, we will take steps to notify affected users and relevant authorities as required by law.
11. Children's Privacy
The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided personal information, please contact us and we will delete it.
12. Complaints
If you have a privacy complaint, contact [CONTACT EMAIL]. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) or the relevant privacy regulator in your jurisdiction.
13. Contact
For privacy questions, contact [CONTACT EMAIL] or use our Contact page.
This document is provided as general information and does not constitute legal advice. Professional Australian legal advice should be obtained before relying on this document.